Live › vulnerability › CVE-2026-105661
Go to dashboardRequesting the /{username}/-/repositories path for an individual user instead of an organization makes the server dereference a nil organization and panic. Each such request returns HTTP 500 and logs a panic, which is a denial of service rather than code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Requesting /{username}/-/repositories for an individual user instead of an organization made the organization home handler dereference a nil organization and panic. The request needs no authentication and no special configuration. The server answered with an HTTP 500 error and logged a panic for each request; the fix returns 404 for individual users.
This page as .md · .json · in your agent: get_signal("CVE-2026-105661")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.